Okta & IGA Engineer – Onboarding & BAU Support

We are looking for an experienced Okta & IGA Engineer to support the implementation, onboarding and ongoing operations of enterprise Identity & Access Management (IAM) solutions. The role will be responsible for onboarding applications into Okta, implementing Single Sign-On (SSO) and Multi-Factor Authentication (MFA), supporting Identity Governance & Administration (IGA) activities, developing automated identity workflows and providing Tier 2/3 operational support for the Okta environment. The successful candidate should have strong hands-on experience with Okta, modern authentication protocols, Active Directory integration, APIs and access governance processes.

Key Responsibilities:

• Manage end-to-end onboarding of SaaS, cloud-native and custom enterprise applications into Okta.
• Configure, test and troubleshoot SSO and MFA integrations using SAML 2.0, OAuth 2.0 and OpenID Connect (OIDC).
• Implement and support agentless SSO and header-based authentication solutions for legacy applications.
• Develop custom validation rules, Okta Inline Hooks and automated identity lifecycle workflows using APIs and programming languages.
• Work closely with application owners, infrastructure teams and other stakeholders to gather requirements and support application onboarding throughout the SDLC.
• Configure Active Directory service accounts, Service Principal Names (SPNs) and Kerberos-based authentication workflows.
• Configure and support Okta Network Zones, Identity Provider routing rules and related access policies.
• Execute end-to-end Access Certification Campaigns using Okta Identity Governance (OIG) or integrated IGA platforms.
• Define campaign scope, reviewer assignments, remediation workflows and automated access revocation rules.
• Support Joiner, Mover and Leaver identity lifecycle processes.
• Provide Tier 2/3 operational support for the enterprise Okta environment.
• Troubleshoot authentication failures, directory synchronisation issues, token mismatches, federation errors and user access incidents.
• Perform root-cause analysis for recurring IAM issues and implement appropriate preventive measures.
• Support audit, compliance and security requirements relating to identity and access management.
• Maintain technical documentation, operational procedures and application onboarding records.

Required Skills & Experience:

• 5–7 years of experience designing, implementing and supporting enterprise Identity & Access Management solutions.
• Strong hands-on experience administering and supporting Okta in an enterprise environment.
• Experience configuring Okta SSO profiles, lifecycle management rules and custom authorization servers.
• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and modern federation standards.
• Hands-on experience with Okta Identity Governance (OIG) or other enterprise IGA platforms.
• Experience executing Access Certification / Access Review campaigns, including remediation and automated revocation.
• Experience with Active Directory integration, Kerberos, Service Accounts and SPNs.
• Experience implementing agentless or gateway-based authentication for legacy applications.
• Strong understanding of APIs, JSON payloads, token-based authentication and API middleware.
• Proficiency in at least one programming or scripting language such as JavaScript/Node.js, Java, Python, C# or Go.
• Experience developing integrations using Okta APIs, Inline Hooks or custom authentication workflows.
• Strong troubleshooting experience covering authentication, federation, directory synchronisation and identity lifecycle issues.
• Experience providing Tier 2/3 operational support for enterprise IAM environments.

Qualifications:

• Degree in Information Technology, Computer Science, Engineering or equivalent.
• Relevant Okta certification such as:

1. Okta Certified Professional
2. Okta Certified Administrator
3. Okta Certified Consultant
4. Okta Certified Developer

To apply,simply click the "Apply" button or send your updated profile to [email protected]

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.